Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft
File:                     qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft (raw, json)
Hash identifier:          sMNmWGLDD1NGn6Pp7+PB6twp2UTzGj3kS77wRkUwpi0=
Subject key identifier:   97:69:C5:AD:A3:02:F0:9D:1C:CE:02:A0:EC:BB:D5:0C:31:08:43:53
Authority key identifier: AB:3A:9D:1F:C9:9F:25:2F:22:58:F6:82:AB:3F:C5:83:5B:D2:F7:25
Certificate issuer:       /CN=ab3a9d1fc99f252f2258f682ab3fc5835bd2f725
Certificate serial:       01962F3D83776ECF19238D9911811D0CE5A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft
Manifest number:          145A
Signing time:             Sun 13 Apr 2025 13:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:22 +0000
Files and hashes:         1: qzqdH8mfJS8iWPaCqz_Fg1vS9yU.crl (hash: H26hgJGtPI9DrV+KiPOiROjVJCndTcZ+wqY2jybE2NQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:83:77:6e:cf:19:23:8d:99:11:81:1d:0c:e5:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab3a9d1fc99f252f2258f682ab3fc5835bd2f725
        Validity
            Not Before: Apr 13 13:01:22 2025 GMT
            Not After : Apr 14 13:01:22 2025 GMT
        Subject: CN=9769c5ada302f09d1cce02a0ecbbd50c31084353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:db:62:7c:9a:c1:db:eb:0d:ce:f6:07:f2:c3:
                    2c:79:f4:c8:bf:c1:92:b6:86:2f:d4:0b:ef:74:ff:
                    4e:6d:b7:4a:11:2c:d4:03:ee:65:9a:9a:f4:8a:11:
                    a9:da:08:2f:e8:fe:02:f6:cb:bf:11:16:79:ba:28:
                    02:aa:97:43:74:7c:4d:a9:08:78:e7:98:8d:ab:a8:
                    1f:2a:cb:74:1f:dd:f0:84:e6:79:15:d2:56:82:68:
                    8e:7f:69:83:b8:1d:2c:9d:1a:71:93:4c:43:2d:a2:
                    0b:88:a3:4a:41:2b:33:e6:47:74:cc:16:99:b9:9e:
                    31:70:68:cb:36:47:69:18:67:6a:1a:bf:a6:c8:03:
                    0f:5b:f6:80:4b:00:1f:e7:23:b7:ba:20:a6:a3:b0:
                    13:b1:55:1d:52:fb:f4:fb:b4:d9:a5:89:09:60:03:
                    77:e7:69:d3:d2:73:02:9c:ab:54:f4:a5:50:2c:fa:
                    33:ff:cb:a1:4c:b2:c0:cb:43:16:44:af:e3:e2:c1:
                    3a:3d:2c:f9:24:47:91:09:bb:93:e5:0a:cd:a5:86:
                    3e:51:a4:5d:6f:0e:be:00:91:3a:25:22:a3:50:ee:
                    85:3c:f3:fe:dc:ff:cd:cb:a3:75:c7:d5:38:e2:40:
                    49:9f:48:c4:02:93:22:cb:13:78:11:23:f8:f2:34:
                    9e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:69:C5:AD:A3:02:F0:9D:1C:CE:02:A0:EC:BB:D5:0C:31:08:43:53
            X509v3 Authority Key Identifier:
                keyid:AB:3A:9D:1F:C9:9F:25:2F:22:58:F6:82:AB:3F:C5:83:5B:D2:F7:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:69:b0:dd:7c:a5:87:b2:6c:05:e2:28:d3:ab:53:d4:53:a1:
         af:75:61:e4:c9:6b:19:c6:72:a6:3c:d0:37:ce:57:29:2c:50:
         0d:f3:57:ba:49:c9:0a:23:6c:81:59:c7:29:57:e7:be:33:8c:
         e9:eb:41:10:30:de:08:a1:d1:3f:f7:36:dd:63:7c:58:d4:8e:
         64:7f:89:2d:bf:7b:b8:03:b6:07:8c:0f:9b:d9:71:f2:27:85:
         50:e1:ab:2c:33:05:a6:16:27:1b:0e:d3:3d:26:e8:ea:61:f6:
         9e:6b:e8:db:17:fc:b9:66:38:84:d6:c8:af:b8:4e:b3:f8:3a:
         40:6b:51:46:58:e2:4e:f9:ae:34:b7:02:8e:da:9d:e4:d9:af:
         2b:9e:1c:4d:0b:c0:54:20:3d:09:d1:cc:71:50:6a:a0:c6:76:
         8b:ec:50:3a:c1:46:c1:d1:87:44:af:45:fe:df:40:55:2b:8c:
         c5:9b:8a:60:b2:c7:b5:29:a4:8c:2b:29:ce:1d:d8:98:61:93:
         17:b7:ec:eb:a0:cd:2a:b7:51:99:4a:cc:0d:1c:8a:33:be:9f:
         c8:a7:ac:bf:63:84:c1:bc:6c:ad:20:2a:c9:7c:35:42:39:0b:
         97:50:71:f9:b2:e3:b1:b3:80:f2:2c:40:65:54:b8:e8:66:49:
         38:ad:62:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----